Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    25/09/2024, 04:03

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/samba-root-shellcode-linux-glibc-s390x.so: exec format error

General

  • Target

    samba-root-shellcode-linux-glibc-s390x.so

  • Size

    17KB

  • MD5

    2fb4621972dda1c1b6b43e506d8bfa21

  • SHA1

    3e6e8a6205113172414f26e3d0cea19a3ad9c22b

  • SHA256

    71cdf22e588a114ade284d40dc76d593dfb9ecb1b4d010aeda8128e868cd6e35

  • SHA512

    5094a663d8a6313f9f723158db9bdf38bcfc9ebd352128a799e3f2bca0b04c139aab8a2b36d6c6e1314f7f715424aaa8d1027af940ed3865f96cb752a5291027

  • SSDEEP

    96:Wx+MBWBPvEGUcpxp2TkmMsXDUOpJOO9piii8BrzWBG+Z:k38pvEGUcnp2TRMsXQO+Ofi8BWX

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/samba-root-shellcode-linux-glibc-s390x.so
    /tmp/samba-root-shellcode-linux-glibc-s390x.so
    1⤵
      PID:661

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads